Исследование антивирусов 5

[Geser]

08:59:48 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 TR/Crypt.PCMM.Gen
Authentium 4.93.8 02.09.2007 no virus found
Avast 4.7.936.0 02.09.2007 no virus found
AVG 386 02.09.2007 no virus found
BitDefender 7.2 02.10.2007 no virus found
CAT-QuickHeal 9.00 02.09.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.09.2007 no virus found
DrWeb 4.33 02.09.2007 BackDoor.Mailbot
eSafe 7.0.14.0 02.09.2007 Win32.SdBot.beb
eTrust-Vet 30.4.3384 02.10.2007 no virus found
Ewido 4.0 02.09.2007 Backdoor.SdBot.beb
Fortinet 2.85.0.0 02.10.2007 W32/SDBot.BEB!tr.bdr
F-Prot 4.2.1.29 02.09.2007 no virus found
F-Secure 6.70.13030.0 02.10.2007 Backdoor.Win32.SdBot.beb
Ikarus T3.1.0.31 02.10.2007 Backdoor.Win32.SdBot.beb
Kaspersky 4.0.2.24 02.10.2007 Backdoor.Win32.SdBot.beb
McAfee 4960 02.09.2007 W32/Sdbot.worm!76714
Microsoft 1.2204 02.10.2007 no virus found
NOD32v2 2049 02.10.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.09.2007 W32/Sdbot.JKF.worm
Prevx1 V2 02.10.2007 no virus found
Sophos 4.13.0 02.08.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 VIPRE.Suspicious
Symantec 10 02.10.2007 no virus found
TheHacker 6.1.6.055 02.09.2007 no virus found
UNA 1.83 02.09.2007 Backdoor.SdBot.1217
VBA32 3.11.2 02.09.2007 Backdoor.Win32.SdBot.beb
VirusBuster 4.3.19:9 02.09.2007 no virus found

[saicat]

Complete scanning result of "msg.nyNVvm", received in VirusTotal at 02.10.2007, 11:27:26 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 TR/Dldr.iBill.L
Authentium 4.93.8 02.09.2007 W32/Downloader.BBAV
Avast 4.7.936.0 02.09.2007 no virus found
AVG 386 02.09.2007 no virus found
BitDefender 7.2 02.10.2007 no virus found
CAT-QuickHeal 9.00 02.09.2007 no virus found
ClamAV devel-20060426 02.10.2007 no virus found
DrWeb 4.33 02.09.2007 no virus found
eSafe 7.0.14.0 02.09.2007 no virus found
eTrust-Vet 30.4.3384 02.10.2007 no virus found
Ewido 4.0 02.09.2007 no virus found
Fortinet 2.85.0.0 02.10.2007 suspicious
F-Prot 4.2.1.29 02.09.2007 W32/Downloader.BBAV
F-Secure 6.70.13030.0 02.10.2007 no virus found
Ikarus T3.1.0.31 02.10.2007 no virus found
Kaspersky 4.0.2.24 02.10.2007 no virus found
McAfee 4960 02.09.2007 New Win32
Microsoft 1.2204 02.10.2007 no virus found
NOD32v2 2049 02.10.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.09.2007 Suspicious file
Prevx1 V2 02.10.2007 no virus found
Sophos 4.13.0 02.08.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.10.2007 no virus found
TheHacker 6.1.6.055 02.09.2007 no virus found
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.09.2007 suspected of I-Worm (double extension)
VirusBuster 4.3.19:9 02.09.2007 no virus found

Aditional Information
File size: 15309 bytes
MD5: 2d07870d80655861f25bb91989f85d09
SHA1: 7e3e1320480d899263b284e5a84492f6b2eaf2ea

[Geser]

15:48:22 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 no virus found
Authentium 4.93.8 02.09.2007 no virus found
Avast 4.7.936.0 02.09.2007 no virus found
AVG 386 02.09.2007 no virus found
BitDefender 7.2 02.10.2007 Adware.MyWebSearch.AU
CAT-QuickHeal 9.00 02.09.2007 no virus found
ClamAV devel-20060426 02.10.2007 Adware.Mywebsearch-2
DrWeb 4.33 02.10.2007 no virus found
eSafe 7.0.14.0 02.09.2007 no virus found
eTrust-Vet 30.4.3384 02.10.2007 no virus found
Ewido 4.0 02.10.2007 no virus found
Fortinet 2.85.0.0 02.10.2007 W32/MyWebSearch
F-Prot 4.2.1.29 02.09.2007 no virus found
F-Secure 6.70.13030.0 02.10.2007 no virus found
Ikarus T3.1.0.31 02.10.2007 not-a-virus:AdWare.Win32.MyWebSearch
Kaspersky 4.0.2.24 02.10.2007 not-a-virus:AdTool.Win32.MyWebSearch
McAfee 4960 02.09.2007 potentially unwanted program MWS
Microsoft 1.2204 02.10.2007 no virus found
NOD32v2 2050 02.10.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.10.2007 Application/MyWebSearch
Prevx1 V2 02.10.2007 no virus found
Sophos 4.13.0 02.08.2007 MyWebSearch
Sunbelt 2.2.907.0 02.09.2007 MyWebSearch Toolbar
Symantec 10 02.10.2007 no virus found
TheHacker 6.1.6.055 02.09.2007 no virus found
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.09.2007 no virus found
VirusBuster 4.3.19:9 02.09.2007 no virus found

[Winsent]

Complete scanning result of "foto.rar", received in VirusTotal at 02.11.2007, 09:35:26 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 TR/PSW.LdPinch.bmh
Authentium 4.93.8 02.09.2007 no virus found
Avast 4.7.936.0 02.11.2007 no virus found
AVG 386 02.10.2007 PSW.Ldpinch.EJI
BitDefender 7.2 02.11.2007 no virus found
CAT-QuickHeal 9.00 02.09.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.10.2007 no virus found
DrWeb 4.33 02.10.2007 Trojan.PWS.LDPinch.1423
eSafe 7.0.14.0 02.09.2007 Win32.LdPinch.bmh
eTrust-Vet 30.4.3384 02.10.2007 no virus found
Ewido 4.0 02.10.2007 Trojan.LdPinch.bmh
Fortinet 2.85.0.0 02.11.2007 W32/LdPinch.BMH!tr.pws
F-Prot 4.2.1.29 02.09.2007 no virus found
F-Secure 6.70.13030.0 02.10.2007 Trojan-PSW.Win32.LdPinch.bmh
Ikarus T3.1.0.31 02.11.2007 no virus found
Kaspersky 4.0.2.24 02.11.2007 Trojan-PSW.Win32.LdPinch.bmh
McAfee 4960 02.09.2007 no virus found
Microsoft 1.2204 02.11.2007 no virus found
NOD32v2 2051 02.10.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.10.2007 Suspicious file
Prevx1 V2 02.11.2007 no virus found
Sophos 4.13.0 02.08.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.11.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 Trojan/PSW.LdPinch.bmh
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.10.2007 Trojan-PSW.Win32.LdPinch.bmh
VirusBuster 4.3.19:9 02.10.2007 no virus found

Aditional Information
File size: 29180 bytes
MD5: d1ba2c7856a3be5559a76bfdd1eade6e
SHA1: 89cb4bf8f76b618d662ab4b16e5a97a2ac3c5ff6

[Winsent]

Complete scanning result of "flash.exe", received in VirusTotal at 02.12.2007, 16:44:55 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.36 02.12.2007 DIAL/30835.A
Authentium 4.93.8 02.12.2007 no virus found
Avast 4.7.936.0 02.12.2007 no virus found
AVG 386 02.12.2007 no virus found
BitDefender 7.2 02.12.2007 Trojan.Dropper.Zlob.C
CAT-QuickHeal 9.00 02.12.2007 no virus found
ClamAV devel-20060426 02.12.2007 no virus found
DrWeb 4.33 02.12.2007 Trojan.MulDrop.5509
eSafe 7.0.14.0 02.12.2007 Win32.LdPinch.bia
eTrust-Vet 30.4.3391 02.12.2007 no virus found
Ewido 4.0 02.11.2007 no virus found
Fortinet 2.85.0.0 02.12.2007 W32/LdPinch.BIA!tr.pws
F-Prot 4.2.1.29 02.12.2007 no virus found
F-Secure 6.70.13030.0 02.12.2007 Trojan-PSW.Win32.LdPinch.bia
Ikarus T3.1.0.31 02.12.2007 Trojan-PWS.Win32.LdPinch.bia
Kaspersky 4.0.2.24 02.12.2007 Trojan-PSW.Win32.LdPinch.bia
McAfee 4960 02.09.2007 no virus found
Microsoft 1.2204 02.12.2007 no virus found
NOD32v2 2055 02.12.2007 no virus found
Norman 5.80.02 02.12.2007 no virus found
Panda 9.0.0.4 02.12.2007 Suspicious file
Prevx1 V2 02.12.2007 no virus found
Sophos 4.13.0 02.12.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.12.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.11.2007 Trojan.MulDrop.5509
VirusBuster 4.3.19:9 02.12.2007 no virus found

Aditional Information
File size: 30219 bytes
MD5: eaf40e9230cf1de78a8a8f50bbca5b7d
SHA1: 19c1ffd9ff9f6139bb9595dc9463299788bf05c6

[anton_dr]

Из темы http://virusinfo.info/showthread.php?t=7935
Complete scanning result of "avz00001.dta", received in VirusTotal at 02.13.2007, 11:34:20 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.13.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.12.2007 W32/PWStealer.FJQ
Avast 4.7.936.0 02.12.2007 no virus found
AVG 386 02.12.2007 PSW.Generic3.CWB
BitDefender 7.2 02.13.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.12.2007 no virus found
DrWeb 4.33 02.13.2007 Trojan.PWS.Pero
eSafe 7.0.14.0 02.12.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3394 02.13.2007 no virus found
Ewido 4.0 02.12.2007 Trojan.Ceda.a
Fortinet 2.85.0.0 02.13.2007 suspicious
F-Prot 4.2.1.29 02.12.2007 W32/PWStealer.FJQ
F-Secure 6.70.13030.0 02.13.2007 Trojan-PSW.Win32.Ceda.a
Ikarus T3.1.0.31 02.13.2007 no virus found
Kaspersky 4.0.2.24 02.13.2007 Trojan-PSW.Win32.Ceda.a
McAfee 4961 02.12.2007 no virus found
Microsoft 1.2204 02.13.2007 TrojanDownloader:Win32/Clagger.gen!B
NOD32v2 2056 02.12.2007 probably a variant of Win32/Genetik
Norman 5.80.02 02.13.2007 Suspicious_F.gen
Panda 9.0.0.4 02.13.2007 Suspicious file
Prevx1 V2 02.13.2007 Trojan.SystemPoser
Sophos 4.13.0 02.12.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 VIPRE.Suspicious
Symantec 10 02.13.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.12.2007 no virus found
VirusBuster 4.3.19:9 02.12.2007 novirusacked/FSG

Aditional Information
File size: 27021 bytes
MD5: 4243b966baff1c80fb72ee5485858089
SHA1: 324dd146ca237096acdc78b81a855c9f05f34058
packers: FSG
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=fbc175572579
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Geser]

Complete scanning result of "msrdwint.exe", received in VirusTotal at 02.13.2007, 19:50:54 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.13.2007 no virus found
Authentium 4.93.8 02.12.2007 no virus found
Avast 4.7.936.0 02.13.2007 no virus found
AVG 386 02.13.2007 no virus found
BitDefender 7.2 02.13.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.13.2007 no virus found
DrWeb 4.33 02.13.2007 Win32.HLLM.Limar
eSafe 7.0.14.0 02.12.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3394 02.13.2007 no virus found
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.13.2007 suspicious
F-Prot 4.2.1.29 02.12.2007 no virus found
F-Secure 6.70.13030.0 02.13.2007 no virus found
Ikarus T3.1.0.31 02.13.2007 Backdoor.Win32.Agobot.NQ
Kaspersky 4.0.2.24 02.13.2007 no virus found
McAfee 4961 02.12.2007 New Malware.n
Microsoft 1.2204 02.13.2007 no virus found
NOD32v2 2057 02.13.2007 a variant of Win32/Stration.XJ
Norman 5.80.02 02.13.2007 no virus found
Panda 9.0.0.4 02.13.2007 Suspicious file
Prevx1 V2 02.13.2007 Malware:SysCovert
Sophos 4.14.0 02.13.2007 Mal/Packer
Sunbelt 2.2.907.0 02.09.2007 VIPRE.Suspicious
Symantec 10 02.13.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.13.2007 no virus found
VBA32 3.11.2 02.13.2007 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 02.13.2007 novirusacked/Upack

[anton_dr]

Complete scanning result of "avz00006.dta", received in VirusTotal at 02.13.2007, 20:22:46 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.13.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.12.2007 no virus found
Avast 4.7.936.0 02.13.2007 no virus found
AVG 386 02.13.2007 no virus found
BitDefender 7.2 02.13.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.13.2007 no virus found
DrWeb 4.33 02.13.2007 no virus found
eSafe 7.0.14.0 02.12.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3394 02.13.2007 no virus found
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.13.2007 suspicious
F-Prot 4.2.1.29 02.12.2007 no virus found
F-Secure 6.70.13030.0 02.13.2007 no virus found
Ikarus T3.1.0.31 02.13.2007 no virus found
Kaspersky 4.0.2.24 02.13.2007 no virus found
McAfee 4961 02.12.2007 no virus found
Microsoft 1.2204 02.13.2007 no virus found
NOD32v2 2057 02.13.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 02.13.2007 no virus found
Panda 9.0.0.4 02.13.2007 no virus found
Prevx1 V2 02.13.2007 Worm.Beagle.DZ
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.13.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.13.2007 no virus found
VBA32 3.11.2 02.13.2007 no virus found
VirusBuster 4.3.19:9 02.13.2007 no virus found

Aditional Information
File size: 51131 bytes
MD5: 1c3e1e796c98e60c2c8b91e48e401c23
SHA1: 4cf32a92de29a80b420d09de327999050136de16
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=31eb77103843

[anton_dr]

Complete scanning result of "avz00003.dta", received in VirusTotal at 02.13.2007, 20:22:02 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.13.2007 TR/Dldr.Stration.Gen
Authentium 4.93.8 02.12.2007 no virus found
Avast 4.7.936.0 02.13.2007 no virus found
AVG 386 02.13.2007 no virus found
BitDefender 7.2 02.13.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.13.2007 no virus found
DrWeb 4.33 02.13.2007 Win32.HLLM.Beagle
eSafe 7.0.14.0 02.12.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3394 02.13.2007 no virus found
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.13.2007 suspicious
F-Prot 4.2.1.29 02.12.2007 no virus found
F-Secure 6.70.13030.0 02.13.2007 no virus found
Ikarus T3.1.0.31 02.13.2007 no virus found
Kaspersky 4.0.2.24 02.13.2007 no virus found
McAfee 4961 02.12.2007 no virus found
Microsoft 1.2204 02.13.2007 no virus found
NOD32v2 2057 02.13.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 02.13.2007 no virus found
Panda 9.0.0.4 02.13.2007 no virus found
Prevx1 V2 02.13.2007 Malware.Trojan.Backdoor.Gen
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.13.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.13.2007 no virus found
VBA32 3.11.2 02.13.2007 no virus found
VirusBuster 4.3.19:9 02.13.2007 no virus found

Aditional Information
File size: 22192 bytes
MD5: 2b9bb0434814b7ea3556dd8648cc5669
SHA1: b869f85ffe96f9be1aa595e79dc2d357d5d1c876
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=391077103630

[anton_dr]

Это не хотел постить, но результат ВБА удивил.

Complete scanning result of "avz00005.dta", received in VirusTotal at 02.13.2007, 20:55:03 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.13.2007 TR/Dldr.Bagle.BH
Authentium 4.93.8 02.12.2007 W32/Mitglieder.VK
Avast 4.7.936.0 02.13.2007 no virus found
AVG 386 02.13.2007 I-Worm/Bagle
BitDefender 7.2 02.13.2007 Trojan.Downloader.Bagle.AS
CAT-QuickHeal 9.00 02.13.2007 no virus found
ClamAV devel-20060426 02.13.2007 Trojan.Downloader-548
DrWeb 4.33 02.13.2007 Win32.HLLM.Beagle
eSafe 7.0.14.0 02.12.2007 no virus found
eTrust-Vet 30.4.3394 02.13.2007 Win32/Glieder.EH
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.13.2007 W32/Bagle.BH!tr.dldr
F-Prot 4.2.1.29 02.12.2007 W32/Mitglieder.VK
F-Secure 6.70.13030.0 02.13.2007 Trojan-Downloader.Win32.Bagle.bh
Ikarus T3.1.0.31 02.13.2007 Trojan-Downloader.Win32.Bagle.bh
Kaspersky 4.0.2.24 02.13.2007 Trojan-Downloader.Win32.Bagle.bh
McAfee 4961 02.12.2007 W32/Bagle.gen
Microsoft 1.2204 02.13.2007 Win32/Bagle.gen!encrypted
NOD32v2 2057 02.13.2007 Win32/Bagle.HJ
Norman 5.80.02 02.13.2007 W32/Mitglied.ACA
Panda 9.0.0.4 02.13.2007 Trj/Mitglieder.ME
Prevx1 V2 02.13.2007 no virus found
Sophos 4.14.0 02.13.2007 Mal/Bagpk-A
Sunbelt 2.2.907.0 02.09.2007 VIPRE.Suspicious
Symantec 10 02.13.2007 Trojan.Tooso.R
TheHacker 6.1.6.056 02.11.2007 Trojan/Downloader.Bagle.bh
UNA 1.83 02.13.2007 TrojanDownloader.Win32.Bagle.A227
VBA32 3.11.2 02.13.2007 no virus found
VirusBuster 4.3.19:9 02.13.2007 Trojan.DL.Bagle.LJ

Aditional Information
File size: 1958746 bytes
MD5: ab26d999ae025c410a2b721cb25be695
SHA1: 16f075f768d0aa2bfe8dca51bb077934fb2f52f7
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[anton_dr]

Complete scanning result of "avz00002.dta", received in VirusTotal at 02.13.2007, 20:54:08 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.13.2007 TR/Rkit.Bagle.GL
Authentium 4.93.8 02.12.2007 no virus found
Avast 4.7.936.0 02.13.2007 no virus found
AVG 386 02.13.2007 no virus found
BitDefender 7.2 02.13.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 no virus found
ClamAV devel-20060426 02.13.2007 no virus found
DrWeb 4.33 02.13.2007 no virus found
eSafe 7.0.14.0 02.12.2007 no virus found
eTrust-Vet 30.4.3394 02.13.2007 no virus found
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.13.2007 suspicious
F-Prot 4.2.1.29 02.12.2007 no virus found
F-Secure 6.70.13030.0 02.13.2007 Email-Worm.Win32.Bagle.hj
Ikarus T3.1.0.31 02.13.2007 no virus found
Kaspersky 4.0.2.24 02.13.2007 Email-Worm.Win32.Bagle.hj
McAfee 4961 02.12.2007 NTRootKit-W
Microsoft 1.2204 02.13.2007 no virus found
NOD32v2 2057 02.13.2007 a variant of Win32/Bagle
Norman 5.80.02 02.13.2007 no virus found
Panda 9.0.0.4 02.13.2007 no virus found
Prevx1 V2 02.13.2007 Bagle.Rootkit
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.13.2007 no virus found
TheHacker 6.1.6.056 02.11.2007 no virus found
UNA 1.83 02.13.2007 no virus found
VBA32 3.11.2 02.13.2007 no virus found
VirusBuster 4.3.19:9 02.13.2007 no virus found

Aditional Information
File size: 69248 bytes
MD5: a3769f16f8a603eced9ef13ffa9e312f
SHA1: d2248764a45d38125050cc95693c7334e7e441f5
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=5a2f77103519

[MedvedD]

scanning result of "winzlo32.dll", received in VirusTotal at 02.14.2007, 11:03:53 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.14.2007 TR/Crypt.PEC2X.Gen
Authentium 4.93.8 02.14.2007 no virus found
Avast 4.7.936.0 02.14.2007 no virus found
AVG 386 02.14.2007 Generic3.AGG
BitDefender 7.2 02.14.2007 no virus found
CAT-QuickHeal 9.00 02.13.2007 no virus found
ClamAV devel-20060426 02.14.2007 no virus found
DrWeb 4.33 02.14.2007 no virus found
eSafe 7.0.14.0 02.14.2007 Win32.Agent.qt
eTrust-Vet 30.4.3397 02.14.2007 no virus found
Ewido 4.0 02.13.2007 no virus found
Fortinet 2.85.0.0 02.14.2007 W32/Agent.QT!tr
F-Prot 4.2.1.29 02.14.2007 no virus found
F-Secure 6.70.13030.0 02.14.2007 Trojan.Win32.Agent.qt
Ikarus T3.1.0.31 02.14.2007 Trojan.Win32.Agent.qt
Kaspersky 4.0.2.24 02.14.2007 Trojan.Win32.Agent.qt
McAfee 4962 02.13.2007 BackDoor-CVT
Microsoft 1.2204 02.14.2007 no virus found
NOD32v2 2059 02.14.2007 a variant of Win32/Agent.QT
Norman 5.80.02 02.14.2007 W32/Agent.dam
Panda 9.0.0.4 02.14.2007 Suspicious file
Prevx1 V2 02.14.2007 no virus found
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 VIPRE.Suspicious
Symantec 10 02.14.2007 no virus found
TheHacker 6.1.6.057 02.14.2007 Trojan/Agent.qt
UNA 1.83 02.13.2007 no virus found
VBA32 3.11.2 02.13.2007 no virus found
VirusBuster 4.3.19:9 02.14.2007 no virus found


Aditional Information
File size: 18432 bytes
MD5: b5fa8436d10db4252e3bc03f9de95458
SHA1: d9ebb3f031fa05c30df11a467a2fcc04cffcaf48
packers: PECOMPACT
packers: PecBundle, PECompact
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

Что характерно, два дня назад его никто не обнаруживал..

[saicat]

Complete scanning result of "access-dvd1183.exe", received in VirusTotal at 02.14.2007, 23:28:31 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.14.2007 no virus found
Authentium 4.93.8 02.14.2007 no virus found
Avast 4.7.936.0 02.14.2007 no virus found
AVG 386 02.14.2007 no virus found
BitDefender 7.2 02.14.2007 no virus found
CAT-QuickHeal 9.00 02.14.2007 no virus found
ClamAV devel-20060426 02.14.2007 no virus found
DrWeb 4.33 02.14.2007 no virus found
eSafe 7.0.14.0 02.14.2007 no virus found
eTrust-Vet 30.4.3397 02.14.2007 no virus found
Ewido 4.0 02.14.2007 no virus found
Fortinet 2.85.0.0 02.14.2007 no virus found
F-Prot 4.2.1.29 02.14.2007 no virus found
F-Secure 6.70.13030.0 02.14.2007 W32/Malware.IFN
Ikarus T3.1.0.31 02.14.2007 no virus found
Kaspersky 4.0.2.24 02.14.2007 no virus found
McAfee 4963 02.14.2007 no virus found
Microsoft 1.2204 02.14.2007 password protected
NOD32v2 2061 02.14.2007 the file is probably password protected.
Norman 5.80.02 02.14.2007 no virus found
Panda 9.0.0.4 02.14.2007 no virus found
Prevx1 V2 02.14.2007 no virus found
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.14.2007 no virus found
TheHacker 6.1.6.057 02.14.2007 no virus found
UNA 1.83 02.14.2007 no virus found
VBA32 3.11.2 02.14.2007 MalwareScope.Worm.Warezov.7
VirusBuster 4.3.19:9 02.14.2007 no virus found

Aditional Information
File size: 197799 bytes
MD5: 081e0dfd0fee8ba2efb4e69c87221285
SHA1: d775cbe62ac3c672202bfd07ef79a1f5a39264d5
packers: BINARYRES, UPX, BINARYRES

[Shu_b]

Complete scanning result of "ndis.sys", received in VirusTotal at 02.15.2007, 11:12:53 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.15.2007 no virus found
Authentium 4.93.8 02.15.2007 no virus found
Avast 4.7.936.0 02.14.2007 no virus found
AVG 386 02.14.2007 no virus found
BitDefender 7.2 02.15.2007 Trojan.Agent.AJH
CAT-QuickHeal 9.00 02.15.2007 SpamTool.Agent.u (Not a Virus)
ClamAV devel-20060426 02.15.2007 no virus found
DrWeb 4.33 02.15.2007 no virus found
eSafe 7.0.14.0 02.14.2007 no virus found
eTrust-Vet 30.4.3400 02.15.2007 no virus found
Ewido 4.0 02.14.2007 no virus found
Fortinet 2.85.0.0 02.15.2007 suspicious
F-Prot 4.2.1.29 02.15.2007 no virus found
F-Secure 6.70.13030.0 02.15.2007 SpamTool.Win32.Agent.y
Ikarus T3.1.0.31 02.15.2007 no virus found
Kaspersky 4.0.2.24 02.15.2007 SpamTool.Win32.Agent.y
McAfee 4963 02.14.2007 no virus found
Microsoft 1.2204 02.15.2007 Spammer:Win32/Mailbot.P
NOD32v2 2062 02.15.2007 a variant of Win32/Spabot.NAC
Norman 5.80.02 02.14.2007 no virus found
Panda 9.0.0.4 02.15.2007 no virus found
Prevx1 V2 02.15.2007 no virus found
Sophos 4.14.0 02.13.2007 no virus found
Sunbelt 2.2.907.0 02.15.2007 no virus found
Symantec 10 02.15.2007 no virus found
TheHacker 6.1.6.057 02.14.2007 no virus found
UNA 1.83 02.14.2007 SpamTool.Win32.Agent.2889
VBA32 3.11.2 02.14.2007 no virus found
VirusBuster 4.3.19:9 02.14.2007 no virus found

Aditional Information
File size: 274564 bytes
MD5: 036adf7c154ecf2ff14e55fb664fffcc
SHA1: 1137f4601593773336fa42e08535bc9355c24e56
packers: UPX
packers: BINARYRES, UPX
packers: UPX

[CKYHC]

Прикреплён в соответствии с правилами.
Лог на Virustotal - вот.
Есть зверь или ругается на пакер - непонятно, ибо Upack-анпекера нет.
Файл сохранён как 070218_053653_rld-wfkg_45d7bbc5ee5fb.rar
Размер файла 1812
MD5 9f34f530fb24e661b32637ee7a79d1eb

Complete scanning result of "rld-wfkg.exe", received in VirusTotal at 02.18.2007, 03:27:34 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.17.2007 no virus found
Authentium 4.93.8 02.16.2007 no virus found
Avast 4.7.936.0 02.18.2007 no virus found
AVG 386 02.17.2007 no virus found
BitDefender 7.2 02.18.2007 no virus found
CAT-QuickHeal 9.00 02.16.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.17.2007 no virus found
DrWeb 4.33 02.17.2007 no virus found
eSafe 7.0.14.0 02.16.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3408 02.17.2007 no virus found
Ewido 4.0 02.17.2007 no virus found
Fortinet 2.85.0.0 02.17.2007 suspicious
F-Prot 4.2.1.29 02.16.2007 no virus found
F-Secure 6.70.13030.0 02.17.2007 no virus found
Ikarus T3.1.0.31 02.17.2007 Trojan-Dropper.Win32.Agent.ane
Kaspersky 4.0.2.24 02.18.2007 no virus found
McAfee 4965 02.16.2007 no virus found
Microsoft 1.2204 02.17.2007 no virus found
NOD32v2 2067 02.17.2007 no virus found
Norman 5.80.02 02.16.2007 W32/Suspicious_U.gen
Panda 9.0.0.4 02.17.2007 Suspicious file
Prevx1 V2 02.18.2007 no virus found
Sophos 4.14.0 02.16.2007 Mal/Packer
Sunbelt 2.2.907.0 02.17.2007 VIPRE.Suspicious
Symantec 10 02.18.2007 no virus found
TheHacker 6.1.6.059 02.16.2007 no virus found
UNA 1.83 02.16.2007 no virus found
VBA32 3.11.2 02.17.2007 no virus found
VirusBuster 4.3.19:9 02.17.2007 novirusacked/Upack

Aditional Information
File size: 2027 bytes
MD5: 914c221671792964f666a4864d9000f1
SHA1: a206bfec16b3f8dfc35fbab9d2961f088a0d9c0b
packers: UPACK
packers: UPack
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
========================

add: ложное срабатывание

[Muffler]

Complete scanning result of "fail.scr", received in VirusTotal at 02.19.2007, 01:48:37 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.18.2007 HEUR/Crypted
Authentium 4.93.8 02.16.2007 no virus found
Avast 4.7.936.0 02.18.2007 no virus found
AVG 386 02.18.2007 no virus found
BitDefender 7.2 02.18.2007 no virus found
CAT-QuickHeal 9.00 02.16.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.18.2007 no virus found
DrWeb 4.33 02.18.2007 no virus found
eSafe 7.0.14.0 02.18.2007 no virus found
eTrust-Vet 30.4.3410 02.18.2007 no virus found
Ewido 4.0 02.18.2007 no virus found
Fortinet 2.85.0.0 02.18.2007 suspicious
F-Prot 4.2.1.29 02.16.2007 no virus found
F-Secure 6.70.13030.0 02.18.2007 no virus found
Ikarus T3.1.0.31 02.18.2007 no virus found
Kaspersky 4.0.2.24 02.19.2007 no virus found
McAfee 4965 02.16.2007 no virus found
Microsoft 1.2204 02.18.2007 no virus found
NOD32v2 2069 02.18.2007 no virus found
Norman 5.80.02 02.16.2007 no virus found
Panda 9.0.0.4 02.18.2007 Suspicious file
Prevx1 V2 02.19.2007 no virus found
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 VIPRE.Suspicious
TheHacker 6.1.6.059 02.16.2007 no virus found
UNA 1.83 02.16.2007 no virus found
VBA32 3.11.2 02.18.2007 no virus found
VirusBuster 4.3.19:9 02.18.2007 no virus found

Aditional Information
File size: 51147 bytes
MD5: 4ccfbe54d9c49077a988082804d56ea5
SHA1: 0164d8376693f5f0680a69aafe9378e8911414b1
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

После обновления баз по КАВ это будет Trojan-PSW.Win32.LdPinch.bmk

[mvlab]

Complete scanning result of "jkhhe.2ll", received in VirusTotal at 02.19.2007, 23:21:13 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.19.2007 TR/Vundo.Gen
Authentium 4.93.8 02.19.2007 no virus found
Avast 4.7.936.0 02.19.2007 no virus found
AVG 386 02.19.2007 no virus found
BitDefender 7.2 02.19.2007 MemScan:Trojan.Vundo.W
CAT-QuickHeal 9.00 02.19.2007 no virus found
ClamAV devel-20060426 02.19.2007 no virus found
DrWeb 4.33 02.19.2007 Trojan.Virtumod
eSafe 7.0.14.0 02.19.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3412 02.19.2007 no virus found
Ewido 4.0 02.19.2007 no virus found
FileAdvisor 1 02.19.2007 no virus found
Fortinet 2.85.0.0 02.19.2007 suspicious
F-Prot 4.2.1.29 02.19.2007 no virus found
F-Secure 6.70.13030.0 02.19.2007 no virus found
Ikarus T3.1.0.31 02.19.2007 Trojan.Vundo.W
Kaspersky 4.0.2.24 02.19.2007 no virus found
McAfee 4966 02.19.2007 no virus found
Microsoft 1.2204 02.19.2007 no virus found
NOD32v2 2070 02.19.2007 no virus found
Norman 5.80.02 02.19.2007 no virus found
Panda 9.0.0.4 02.19.2007 no virus found
Prevx1 V2 02.19.2007 no virus found
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 VIPRE.Suspicious
Symantec 10 02.19.2007 Trojan.Vundo
TheHacker 6.1.6.060 02.19.2007 no virus found
UNA 1.83 02.19.2007 no virus found
VBA32 3.11.2 02.19.2007 Adware.Virtumonde
VirusBuster 4.3.19:9 02.19.2007 Adware.Vundo.Gen!Pac3


Aditional Information
File size: 277059 bytes
MD5: 5b41e6272a35e6eac178426484a20fef
SHA1: 84e41ddca116c518d3e066630b880e0824442173
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

t=8032
Complete scanning result of "higehsg.dll", received in VirusTotal at 02.20.2007, 13:20:11 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.20.2007 no virus found
Authentium 4.93.8 02.19.2007 no virus found
Avast 4.7.936.0 02.19.2007 no virus found
AVG 386 02.19.2007 Generic3.AHO
BitDefender 7.2 02.20.2007 no virus found
CAT-QuickHeal 9.00 02.20.2007 Hoax.Renos.na (Not a Virus)
ClamAV devel-20060426 02.20.2007 no virus found
DrWeb 4.33 02.20.2007 Trojan.Fakealert.236
eSafe 7.0.14.0 02.20.2007 no virus found
eTrust-Vet 30.4.3414 02.20.2007 Win32/Spax!generic
Ewido 4.0 02.19.2007 no virus found
FileAdvisor 1 02.20.2007 no virus found
Fortinet 2.85.0.0 02.20.2007 FakeAlert.G!tr
F-Prot 4.2.1.29 02.19.2007 no virus found
F-Secure 6.70.13030.0 02.20.2007 no virus found
Ikarus T3.1.0.31 02.20.2007 no virus found
Kaspersky 4.0.2.24 02.20.2007 no virus found
McAfee 4966 02.19.2007 FakeAlert-G
Microsoft 1.2204 02.20.2007 no virus found
NOD32v2 2072 02.20.2007 Win32/Hoax.Renos.NAP
Norman 5.80.02 02.20.2007 W32/Renos.IV
Panda 9.0.0.4 02.20.2007 no virus found
Prevx1 V2 02.20.2007 Generic.Zlob!DL
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 Trojan.FakeAlert
Symantec 10 02.20.2007 no virus found
TheHacker 6.1.6.061 02.20.2007 no virus found
UNA 1.83 02.20.2007 no virus found
VBA32 3.11.2 02.19.2007 suspected of Downloader.Zlob.28 (paranoid heuristics)
VirusBuster 4.3.19:9 02.19.2007 no virus found

Aditional Information
File size: 20992 bytes
MD5: af9a727cb610c8569e5b1a8c15a15b8d
SHA1: 7e63cd2fe98be1e34f6a5bbe6953dfb5d99c611f

[Logan]

Ложное срабатывание

Скачал программу FAST Defrag внутри есть файлик close.com AVZ закричал Warezov, закинул на VirusTotal:
AntiVir 7.3.1.37 02.20.2007 no virus found
Authentium 4.93.8 02.19.2007 no virus found
Avast 4.7.936.0 02.20.2007 no virus found
AVG 386 02.20.2007 no virus found
BitDefender 7.2 02.20.2007 Trojan.Spy.Keysave.B
CAT-QuickHeal 9.00 02.20.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.20.2007 no virus found
DrWeb 4.33 02.20.2007 no virus found
eSafe 7.0.14.0 02.20.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3414 02.20.2007 no virus found
Ewido 4.0 02.20.2007 Worm.Warezov.fh
FileAdvisor 1 02.20.2007 no virus found
Fortinet 2.85.0.0 02.20.2007 W32/Stration.FH@mm
F-Prot 4.2.1.29 02.19.2007 no virus found
F-Secure 6.70.13030.0 02.20.2007 no virus found
Ikarus T3.1.0.31 02.20.2007 Trojan-Spy.Win32.KeySave
Kaspersky 4.0.2.24 02.20.2007 no virus found
McAfee 4967 02.20.2007 no virus found
Microsoft 1.2204 02.20.2007 no virus found
NOD32v2 2072 02.20.2007 no virus found
Norman 5.80.02 02.20.2007 no virus found
Panda 9.0.0.4 02.20.2007 no virus found
Prevx1 V2 02.20.2007 no virus found
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 VIPRE.Suspicious
Symantec 10 02.20.2007 no virus found
TheHacker 6.1.6.061 02.20.2007 no virus found
UNA 1.83 02.20.2007 I-Worm.Warezov.fh
VBA32 3.11.2 02.20.2007 Email-Worm.Win32.Warezov.fh
VirusBuster 4.3.19:9 02.20.2007 no virus found

Отослал [email protected] действительно клин

[Shu_b]

из t=8046

Complete scanning result of "brrotate.dll", received in VirusTotal at 02.21.2007, 07:45:50 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.20.2007 HEUR/Malware
Authentium 4.93.8 02.19.2007 no virus found
Avast 4.7.936.0 02.20.2007 no virus found
AVG 386 02.20.2007 no virus found
BitDefender 7.2 02.21.2007 no virus found
CAT-QuickHeal 9.00 02.20.2007 no virus found
ClamAV devel-20060426 02.20.2007 no virus found
DrWeb 4.33 02.20.2007 no virus found
eSafe 7.0.14.0 02.20.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3414 02.20.2007 no virus found
Ewido 4.0 02.20.2007 no virus found
FileAdvisor 1 02.21.2007 no virus found
Fortinet 2.85.0.0 02.21.2007 suspicious
F-Prot 4.2.1.29 02.19.2007 no virus found
F-Secure 6.70.13030.0 02.20.2007 no virus found
Ikarus T3.1.0.31 02.21.2007 no virus found
Kaspersky 4.0.2.24 02.21.2007 no virus found
McAfee 4967 02.20.2007 no virus found
Microsoft 1.2204 02.21.2007 no virus found
NOD32v2 2072 02.20.2007 no virus found
Norman 5.80.02 02.20.2007 no virus found
Panda 9.0.0.4 02.20.2007 Adware/AdRotator
Prevx1 V2 02.21.2007 no virus found
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 no virus found
Symantec 10 02.21.2007 no virus found
TheHacker 6.1.6.062 02.21.2007 no virus found
UNA 1.83 02.20.2007 no virus found
VBA32 3.11.2 02.20.2007 no virus found
VirusBuster 4.3.19:9 02.20.2007 no virus found

Aditional Information
File size: 61440 bytes
MD5: 95f5983e3368f34aee4a2df3db3d0477
SHA1: ff7d4ad9e387570bb474618f69d06d5594405df6
packers: UPX
packers: UPX
packers: UPX


Complete scanning result of "xpupdate.exe", received in VirusTotal at 02.21.2007, 07:47:09 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.20.2007 TR/Peed.A.39
Authentium 4.93.8 02.19.2007 no virus found
Avast 4.7.936.0 02.20.2007 no virus found
AVG 386 02.20.2007 Downloader.Tibs
BitDefender 7.2 02.21.2007 Trojan.Peed.Gen
CAT-QuickHeal 9.00 02.20.2007 I-Worm.Zhelatine.ah
ClamAV devel-20060426 02.20.2007 no virus found
DrWeb 4.33 02.20.2007 Trojan.Packed.29
eSafe 7.0.14.0 02.20.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3414 02.20.2007 Win32/Tibs!generic
Ewido 4.0 02.20.2007 no virus found
FileAdvisor 1 02.21.2007 no virus found
Fortinet 2.85.0.0 02.21.2007 suspicious
F-Prot 4.2.1.29 02.19.2007 no virus found
F-Secure 6.70.13030.0 02.20.2007 W32/Tibs.gen39
Ikarus T3.1.0.31 02.21.2007 Email-Worm.Win32.Zhelatin.ah
Kaspersky 4.0.2.24 02.21.2007 no virus found
McAfee 4967 02.20.2007 no virus found
Microsoft 1.2204 02.21.2007 no virus found
NOD32v2 2072 02.20.2007 Win32/Nuwar.gen
Norman 5.80.02 02.20.2007 W32/Tibs.gen39
Panda 9.0.0.4 02.20.2007 Adware/BraveSentry
Prevx1 V2 02.21.2007 Win32.Malware.gen
Sophos 4.14.0 02.19.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 VIPRE.Suspicious
Symantec 10 02.21.2007 no virus found
TheHacker 6.1.6.062 02.21.2007 no virus found
UNA 1.83 02.20.2007 no virus found
VBA32 3.11.2 02.20.2007 Worm.Win32.Nuwar.gen
VirusBuster 4.3.19:9 02.20.2007 Trojan.Tibs.Gen!Pac44